| المجال | الحدث / CVE | المصدر | الوصف | الاستغلال | الخطورة | الأنظمة المتأثرة | نوع التهديد | الحلول | 📅 تاريخ النشر |
|---|---|---|---|---|---|---|---|---|---|
| Exploit |
CVE-2018-14667
CVSS 9.8 CVE-2018-14667 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2018-14667. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2018-14667 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2023-31126
CVSS 9.6 xwiki__xwiki-commons_CVE-2023-31126_14-10-3 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2023-31126. CVSS 9.6. | No | 🔴 Critical | Exploit | Refer to CVE-2023-31126 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Network |
CVE-2019-7482
CVSS 9.8 sonicwall-cve-2019-7482 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2019-7482. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2019-7482 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-67822
CVSS 9.8 go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset exploi… 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2026-67822. CVSS 9.8. | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-67822 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-49410
CVE-2026-49410 - OpenHuman /auth/telegram CSRF allows attacker-controlled sessio… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-49410 Published : Oct. 16, 2026, 10:17 p.m. | 4 hours, 10 minutes ago Des… | No | 🔴 Critical | Vulnerability | Update to v0.56.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-111823
CVSS 9.8 CVE-2026-111823 — Mage OSS through 0.9.80 before 76c4f46 can proceed with sessio… 📄 التفاصيل ← |
NVD | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknow… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-111823 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| WordPress |
CVE-2026-110653
CVSS 9.1 CVE-2026-110653 — The Appointment Booking Plugin – LatePoint | Calendar & Sc… 📄 التفاصيل ← |
NVD | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for Word… | No | 🔴 Critical | WordPress | Vulnerability | Update to v5.7.4 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-104736
CVSS 9.8 CVE-2026-104736 — The LearnPress plugin for WordPress is vulnerable to PHP Objec… 📄 التفاصيل ← |
NVD | The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inc… | No | 🔴 Critical | WordPress | PHP | Exploit | Update to v4.4.10 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-110752
CVE-2026-110752 | Text::CSV_XS up to 1.64 Selector fragment row/col/cell allocat… 📄 التفاصيل ← |
VulDB | A vulnerability marked as problematic has been reported in Text::CSV_XS up to 1.64. This vulnerabili… | No | 🔴 Critical | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-68498
CVE-2026-68498 | FasterXML jackson-core Name Parsing ReaderBasedJsonParser._pars… 📄 التفاصيل ← |
VulDB | A vulnerability classified as problematic was found in FasterXML jackson-core. This vulnerability af… | No | 🔴 Critical | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | OffensiveQueries 📄 التفاصيل ← | Vulners | OffensiveQueries injection payloads cheat sheet I keep on hand during web/app audits. HTML, SQLi, No… | No | 🟠 High | Microsoft Windows | PHP | Vulnerability | Microsoft Patch Tuesday |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| OT/ICS | OpenAI Confirms Its AI Model Hacked Government Website While Counting Hospital B… 📄 التفاصيل ← | Cyber Security News | OpenAI has confirmed that an internal AI model hacked an unnamed government statistics website while… | No | 🟠 High | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| General | 🏴☠️ Everest has just published a new victim : Kissei Shoji 📄 التفاصيل ← | Ransomware.live | [AI generated] N/A I don't have reliable, verified information about a specific company ca… | No | 🟠 High | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-107083
Exploit for CVE-2026-107083 📄 التفاصيل ← |
Vulners | CVE-2026-107083 — SQL Injection via Unquoted Numeric Concatenation in SLiMS 9.8.0 Admin Modules Note… | No | 🟠 High | Exploit | Update to v9.8.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Linux |
CVE-2026-8933
Exploit for CVE-2026-8933 📄 التفاصيل ← |
Vulners | CVE-2026-8933 — snap-confine mount-namespace race → local root shell Working PoC. Full local privile… | PoC Only | 🟠 High | Vulnerability | Refer to CVE-2026-8933 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | pythonSQLInjection_Practica 📄 التفاصيل ← | Vulners | Simulación y Mitigación de SQL Injection 1. Descripción del proyecto Este proyecto académico demuest… | No | 🟠 High | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-107082
Exploit for CVE-2026-107082 📄 التفاصيل ← |
Vulners | CVE-2026-107082 — SQL Injection via opachide / promoted GET Parameters in SLiMS 9.8.0 Admin Bibliogr… | No | 🟠 High | Exploit | Refer to CVE-2026-107082 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | ReadyScript SQL Injection 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective mea… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ReadyScript e-commerce management system Sequence Data Compromise 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to the improper impleme… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ReadyScript e-commerce management system Session Management 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to improper session man… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ReadyScript e-commerce management system File Upload 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loadin… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Windows Update Orchestrator Service Privilege Escalation 📄 التفاصيل ← | Vulners | The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related… | No | 🟠 High | Microsoft Windows | Exploit | Microsoft Patch Tuesday |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Exploit | IAM Proxy Component Compromise Information Disclosure 📄 التفاصيل ← | Vulners | The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Pla… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| iOS | DesktopServicesHelper Privilege Escalation 📄 التفاصيل ← | Vulners | The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization … | No | 🟠 High | Apple macOS | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Exploit | vvdecapp reconstructCoeff Memory Use After Free 📄 التفاصيل ← | Vulners | The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the u… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform SQL Injection 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM involves the failu… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform Path Traversal DoS 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM involves incorrect… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform Unlimited Resource Abuse 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM involves unlimited… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform Authentication Bypass 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM systems is related… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | h2 library Resource Consumption DoS 📄 التفاصيل ← | Vulners | The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled r… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | DIAFAN.CMS SQL Injection 📄 التفاصيل ← | Vulners | The vulnerability of the DIAFAN.CMS website content management system is related to the lack of meas… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | TOPAZ Metron PTS Time Synchronization Command Injection 📄 التفاصيل ← | Vulners | The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to t… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| OT/ICS | Tekon SCADA Privilege Escalation 📄 التفاصيل ← | Vulners | The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions … | No | 🟠 High | ICS/OT | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | KOMTEK Cassa Kurier Module Authentication Bypass 📄 التفاصيل ← | Vulners | Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Websit… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2021-21401
CVSS 7.1 CVE-2021-21401_nanopb-c_AOSP10_R33 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2021-21401. CVSS 7.1. | No | 🟠 High | Exploit | Refer to CVE-2021-21401 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2024-52940
CVSS 7.5 abdal-anydesk-remote-ip-detector exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2024-52940. CVSS 7.5. | No | 🟠 High | Exploit | Refer to CVE-2024-52940 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2021-42362
CVSS 8.8 nate158g-m-w-n-l-p-d-a-o-e exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2021-42362. CVSS 8.8. | No | 🟠 High | Exploit | Refer to CVE-2021-42362 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| VMware | Leveraging GenAI for Simplifying Zero Trust and Accelerating Threat Defense in V… 📄 التفاصيل ← | VMware Security | While organizations continue to advance their zero trust lateral security initiatives, routine firew… | No | 🟠 High | VMware | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-111853
CVSS 8.8 CVE-2026-111853 — An issue was discovered on Tektronix 3 Series MDO devices befo… 📄 التفاصيل ← |
NVD | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vul… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111853 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-111854
CVSS 8.1 CVE-2026-111854 — An issue was discovered on Tektronix 3 Series MDO devices befo… 📄 التفاصيل ← |
NVD | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerabil… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111854 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-111855
CVSS 7.5 CVE-2026-111855 — An issue was discovered on Tektronix 3 Series MDO devices befo… 📄 التفاصيل ← |
NVD | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerabil… | No | 🟠 High | Exploit | Refer to CVE-2026-111855 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| WordPress |
CVE-2026-104734
CVSS 7.2 CVE-2026-104734 — The Kirki – Freeform Page Builder, Website Builder & Custo… 📄 التفاصيل ← |
NVD | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerab… | No | 🟠 High | WordPress | PHP | Exploit | Update to v6.3.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-107762
CVSS 7.5 CVE-2026-107762 — The Kirki – Freeform Page Builder, Website Builder & Custo… 📄 التفاصيل ← |
NVD | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerab… | No | 🟠 High | WordPress | Exploit | Update to v6.3.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-109208
CVSS 7.2 CVE-2026-109208 — The LearnPress – WordPress LMS Plugin for Create and Sell Onli… 📄 التفاصيل ← |
NVD | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vul… | No | 🟠 High | WordPress | Exploit | Update to v4.4.10 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Containers |
CVE-2026-96627
CVSS 8.8 CVE-2026-96627 — Arcane: Delegated users:update permission allows admin account … 📄 التفاصيل ← |
GHSA | ## Summary A user holding the delegated `users:update` permission can reset the global administrator… | No | 🟠 High | Vulnerability | Refer to CVE-2026-96627 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| WordPress |
CVE-2026-96660
CVSS 7.2 CVE-2026-96660 — The User Registration & Membership – Free & Paid Member… 📄 التفاصيل ← |
NVD | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restric… | No | 🟠 High | WordPress | Exploit | Update to v5.2.8 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-103899
CVSS 7.2 CVE-2026-103899 — The EU VAT Assistant for WooCommerce plugin for WordPress is v… 📄 التفاصيل ← |
NVD | The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripti… | No | 🟠 High | WordPress | Vulnerability | Update to v2.1.30 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-92798
CVSS 8.1 CVE-2026-92798 — The User Registration & Membership plugin for WordPress is … 📄 التفاصيل ← |
NVD | The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Exe… | No | 🟠 High | WordPress | Vulnerability | Update to v5.2.8 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-108123
CVSS 7.5 CVE-2026-108123 — The WP Booking System – Booking Calendar plugin for WordPress … 📄 التفاصيل ← |
NVD | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass … | No | 🟠 High | WordPress | Vulnerability | Update to v2.1.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-110753
CVE-2026-110753 | Text::CSV_XS up to 1.64 getline use after free 📄 التفاصيل ← |
VulDB | A vulnerability described as critical has been identified in Text::CSV_XS up to 1.64. This issue aff… | No | 🟠 High | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Linux |
CVE-2026-17591
CVE-2026-17591 | Red Hat Enterprise Linux libarchive archive_entry_copy_mac_meta… 📄 التفاصيل ← |
VulDB | A vulnerability labeled as problematic has been found in Red Hat Enterprise Linux. This affects the … | No | 🟠 High | Red Hat Enterprise Linux | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Web |
CVE-2026-55796
CVE-2026-55796 | Frappe HRMS up to 15.60.2/16.7.0 Salary Payments via ECS Report… 📄 التفاصيل ← |
VulDB | A vulnerability described as critical has been identified in Frappe HRMS up to 15.60.2/16.7.0. Affec… | No | 🟠 High | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | pythonSQLInjection_Practica exploit 📄 التفاصيل ← | Sploitus | Proof-of-concept exploit. | PoC Only | 🟡 Medium | PoC Research | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | TrueConf Server Code Execution 📄 التفاصيل ← | Vulners | The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutra… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Aquarius L311 Driver Access Control 📄 التفاصيل ← | Vulners | The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to … | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp Component Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related t… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp readAlf Heap Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory af… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp Decoder Heap Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use … | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp decoder reconstructCoeff Heap Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the u… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Shtab Project Access Control Unauthorized Access 📄 التفاصيل ← | Vulners | The vulnerability of the Shtab project and task management service is related to deficiencies in acc… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Centralized Printer MFP Supervision Unauthorized Access 📄 التفاصيل ← | Vulners | The vulnerability of the software for centralized printer control and the Printsupervision printer s… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Dr.Web ConfigD Executable Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the Dr.Web ConfigD executable module is related to insufficient protection of o… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | MaxPatrol EDR DoS 📄 التفاصيل ← | Vulners | The vulnerability of the control console of the MaxPatrol EDR detection and response system is relat… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | GEO.RITM REST API Auth Bypass Info Disclosure 📄 التفاصيل ← | Vulners | The vulnerability of the software interface REST API of the GEO.RITM software lies in the lack of au… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | REDAAM IT-infrastructure Management System Auth Bypass 📄 التفاصيل ← | Vulners | The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to defi… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | CommuniGate Pro Access Control Unauthorized Modification 📄 التفاصيل ← | Vulners | The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks … | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| OT/ICS | Tekon SCADA Code Execution 📄 التفاصيل ← | Vulners | The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize… | No | 🟡 Medium | ICS/OT | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | json-sanitizer exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Office | excelpeek exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | PAKURI-THON exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ChromeAlone exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | pygoat exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | sightline exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | flounder exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | house exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | RTSPbrute exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | kube-knark exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | BobTheSmuggler exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Emora-Project exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Containers |
CVE-2026-96626
CVE-2026-96626 - Arcane: Container-registry credential exfiltration via URL repo… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-96626 Published : Oct. 16, 2026, 10:18 p.m. | 4 hours, 9 minutes ago Desc… | No | 🟡 Medium | Docker | Vulnerability | Refer to CVE-2026-96626 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-107763
CVSS 4.3 CVE-2026-107763 — The Fastcache by Host.it plugin for WordPress is vulnerable to… 📄 التفاصيل ← |
NVD | The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions … | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.7.5 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-111601
CVSS 6.1 CVE-2026-111601 — The Hippoo Mobile App for WooCommerce plugin for WordPress is … 📄 التفاصيل ← |
NVD | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scr… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.12.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-111726
CVSS 6.4 CVE-2026-111726 — The Themify Builder plugin for WordPress is vulnerable to Stor… 📄 التفاصيل ← |
NVD | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visi… | No | 🟡 Medium | WordPress | Vulnerability | Update to v7.8.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-109989
CVSS 6.4 CVE-2026-109989 — The Themify Popup plugin for WordPress is vulnerable to Stored… 📄 التفاصيل ← |
NVD | The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'po… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.4.7 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-109985
CVSS 6.4 CVE-2026-109985 — The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching… 📄 التفاصيل ← |
NVD | The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vul… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.4.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-92978
CVSS 4.3 CVE-2026-92978 — The User Registration & Membership – Free & Paid Member… 📄 التفاصيل ← |
NVD | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restric… | No | 🟡 Medium | WordPress | Vulnerability | Update to v5.2.8 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-92715
CVSS 4.3 CVE-2026-92715 — The Tutor LMS – eLearning and online course solution plugin for… 📄 التفاصيل ← |
NVD | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure … | No | 🟡 Medium | WordPress | Vulnerability | Update to v4.1.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-110268
CVSS 4.9 CVE-2026-110268 — The Post Export Import with Media plugin for WordPress is vuln… 📄 التفاصيل ← |
NVD | The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all v… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.17.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-109369
CVSS 6.8 CVE-2026-109369 — The WP Booking System – Booking Calendar plugin for WordPress … 📄 التفاصيل ← |
NVD | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass … | No | 🟡 Medium | WordPress | Exploit | Update to v2.1.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-109368
CVSS 6.5 CVE-2026-109368 — The WP Booking System – Booking Calendar plugin for WordPress … 📄 التفاصيل ← |
NVD | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information… | No | 🟡 Medium | WordPress | Vulnerability | Update to v2.1.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-107752
CVSS 4.9 CVE-2026-107752 — The Welcart e-Commerce plugin for WordPress is vulnerable to g… 📄 التفاصيل ← |
NVD | The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_… | No | 🟡 Medium | WordPress | Vulnerability | Update to v2.12.4 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-107744
CVSS 6.5 CVE-2026-107744 — The LearnPress – WordPress LMS Plugin for Create and Sell Onli… 📄 التفاصيل ← |
NVD | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vul… | No | 🟡 Medium | WordPress | Oracle | Vulnerability | Update to v4.4.10 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Linux |
CVE-2026-89085
CVE-2026-89085 | Red Hat Enterprise Linux parted heap-based overflow 📄 التفاصيل ← |
VulDB | A vulnerability was found in Red Hat Enterprise Linux. It has been rated as very critical. This affe… | No | 🟡 Medium | Red Hat Enterprise Linux | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Linux |
CVE-2026-89096
CVE-2026-89096 | Red Hat Enterprise Linux/OpenShift Container Platform rpc.statd… 📄 التفاصيل ← |
VulDB | A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been … | No | 🟡 Medium | Red Hat Enterprise Linux | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Linux |
CVE-2026-89088
CVE-2026-89088 | Red Hat Enterprise Linux up to 10 libparted buffer overflow 📄 التفاصيل ← |
VulDB | A vulnerability was found in Red Hat Enterprise Linux 6/7/8/9/10. It has been classified as problema… | No | 🟡 Medium | Red Hat Enterprise Linux | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Linux |
CVE-2026-111802
CVE-2026-111802 | Red Hat Enterprise Linux Removable Drive link following 📄 التفاصيل ← |
VulDB | A vulnerability was found in Red Hat Enterprise Linux and classified as problematic. Affected is an … | No | 🟡 Medium | Red Hat Enterprise Linux | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-110759
CVE-2026-110759 | Text::CSV_XS up to 1.64 CSV Parser parse input validation 📄 التفاصيل ← |
VulDB | A vulnerability has been found in Text::CSV_XS up to 1.64 and classified as critical. This impacts t… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-110754
CVE-2026-110754 | Text::CSV_XS up to 1.64 getline memory leak 📄 التفاصيل ← |
VulDB | A vulnerability classified as critical has been found in Text::CSV_XS up to 1.64. Impacted is the fu… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-111044
CVE-2026-111044 | LizardByte Sunshine up to 2026.906.222524 certificate validati… 📄 التفاصيل ← |
VulDB | A vulnerability categorized as problematic has been discovered in LizardByte Sunshine up to 2026.906… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-62438
CVE-2026-62438 | GIMP Decompression integer overflow 📄 التفاصيل ← |
VulDB | A vulnerability was found in GIMP. It has been rated as problematic. Affected is an unknown function… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-62439
CVE-2026-62439 | GIMP File-PVR Plug-in integer overflow 📄 التفاصيل ← |
VulDB | A vulnerability was found in GIMP. It has been declared as critical. This impacts an unknown functio… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-108372
CVE-2026-108372 | loopx-project LoopX up to 0.4.4 Status Server loopx/status_ser… 📄 التفاصيل ← |
VulDB | A vulnerability was found in loopx-project LoopX up to 0.4.4. It has been classified as problematic.… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-96628
CVSS 4.3 CVE-2026-96628 — Arcane: Environment access token bypasses the admin-required au… 📄 التفاصيل ← |
GHSA | ## Summary Arcane v2.10.2 contains an authorization inconsistency in `AuthMiddleware.managerAuth`. … | No | 🟡 Medium | ICS/OT | Refer to CVE-2026-96628 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2026-96542
CVE-2026-96542 | Electronic Arts EA Javelin Anticheat prior 1.0.14940699 EAAntiC… 📄 التفاصيل ← |
VulDB | A vulnerability classified as critical has been found in Electronic Arts EA Javelin Anticheat 1.0.14… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-64862
CVE-2026-64862 | Frappe HRMS up to 15.58.2/16.4.2 PWA API Endpoint improper auth… 📄 التفاصيل ← |
VulDB | A vulnerability marked as problematic has been reported in Frappe HRMS up to 15.58.2/16.4.2. Affecte… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-108374
CVE-2026-108374 | Frappe ErpNext up to 15.120.x/16.33.x improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability labeled as problematic has been found in Frappe ErpNext up to 15.120.x/16.33.x. Affe… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-108373
CVE-2026-108373 | Frappe ERPNext up to 15.117.x/16.26.x Sales Person-wise Transa… 📄 التفاصيل ← |
VulDB | A vulnerability identified as problematic has been detected in Frappe ERPNext up to 15.117.x/16.26.x… | No | 🟡 Medium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Linux | Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found W… 📄 التفاصيل ← | Cyber Security News | Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and L… | No | 🟢 Low | Microsoft Windows | AI Attack | Microsoft Patch Tuesday |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Ransomware | 🏴☠️ N0n has just published a new victim : Company #85 📄 التفاصيل ← | Ransomware.live | IT services · USA | [PENDING EXPOSURE] | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Ransomware | 🏴☠️ N0n has just published a new victim : Company #84 📄 التفاصيل ← | Ransomware.live | construction (custom homes) · USA | [PENDING EXPOSURE] | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Malware | PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads 📄 التفاصيل ← | Wordfence | Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. Acc… | No | 🟢 Low | Malware | Update to v3.0.123 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| General | 🏴☠️ Everest has just published a new victim : Chugoku Bend 📄 التفاصيل ← | Ransomware.live | [AI generated] N/A I don't have reliable, verifiable information about a company specifica… | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| General | 🏴☠️ Everest has just published a new victim : Taekwang Network 📄 التفاصيل ← | Ransomware.live | [AI generated] N/A | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Android | 🏴☠️ Everest has just published a new victim : Brenner Base Tunnel 📄 التفاصيل ← | Ransomware.live | [AI generated] The Brenner Base Tunnel (Brennerbasistunnel, BBT) is a major railway infrastructure p… | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Threat Intel | 🏴☠️ N0n has just published a new victim : Prafesta Ind. e Com. de Embalagens Lt… 📄 التفاصيل ← | Ransomware.live | packaging manufacturing (extrusion) · Brazil | Senior Sapiens ERP and Vetorh HR payroll platform; eS… | No | 🟢 Low | SAP | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-111602
CVSS 3.7 CVE-2026-111602 — The Appointment Booking Plugin – LatePoint | Calendar & Sc… 📄 التفاصيل ← |
NVD | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for Word… | No | 🟢 Low | WordPress | Exploit | Update to v5.7.4 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-110758
CVE-2026-110758 — GHSA: Text::CSV_XS versions before 1.65 for Perl read before t… 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_w… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
||
| Vulnerability |
CVE-2026-110757
CVE-2026-110757 — GHSA: Text::CSV_XS versions before 1.65 for Perl allow record … 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
||
| Vulnerability |
CVE-2026-110756
CVE-2026-110756 — GHSA: Text::CSV_XS versions before 1.65 for Perl drop the end … 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
||
| Vulnerability |
CVE-2026-110755
CVE-2026-110755 — GHSA: Text::CSV_XS versions before 1.65 for Perl allow quadrat… 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|